CloudThe Hacker Newsabout 4 hours ago
JadeProx Uses TriBack Loader in Government Attacks
1 min read
Group-IB tracks a China-nexus operation called JadeProx that targets government, healthcare, and education organizations across Asia and Latin America. The cluster uses a previously undocumented Windows loader called TriBack Loader, found on an exposed Alibaba Cloud server in Singapore. Active intrusions hit a Vietnamese hospital and Malaysia's Ministry of Foreign Affairs.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
